For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Jul 03, 2014

Irule to see source IPs

HI All,   I am looking for an option to solve my problem below.   I have a VIP configured with https ports (443,447 etc) with SNAT enabled. Now our Web server want to see the Client IPS , Can y...
application delivery
devops
iRules
Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Jul 06, 2014

Hello Kaladhar...you can do this 2 ways. First one is what Vitaliy and Nitass are suggesting - by using X-Forwarder if its a HTTP traffic and web server in the backend that needs to see the client ip.

 

The second option is by eliminating SNAT and using the F5 ip as your gateway for the servers instead of a switch. The second step involves in configuring your server network settings. The reason I am suggesting the second step is X-Forwarder will not work for non http traffic. I had a situation where the client address has to be seen by an application server and there was no way X-Forwarder would have resolved the issue.